CVE-2026-117570
Publiée le 2026-10-27 · Dernière modification le 2026-10-27
Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script, running intrusive, brute-force, exploit, or denial-of-service scripts against scan targets.
DÉTAIL DU VECTEUR CVSS
🇬🇧 WHY IT MATTERS (en anglais)
Vorota-ai nmap-mcp (up to commit 3636afa) provides a tool for vulnerability scanning via Nmap. The `scan_vulnerabilities` tool uses an allowlist to restrict which Nmap Scripting Engine (NSE) categories can be executed for safety. However, a validation flaw allows users to bypass this list and specify forbidden categories, such as "exploit" or "dos," in the command. An attacker with local access or a prompt-injected agent can use this flaw to launch intrusive brute-force or denial-of-service attacks against scan targets. While this does not grant direct access to the server itself, it compromises the integrity and availability of the remote targets being scanned. Exploitation is straightforward and requires only low-level privileges, with no user interaction needed.